$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa File: 8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa (raw, json) Hash identifier: vBoSjiGU4gPPyF2auoWn6tE8fGzEM+ztjVuUMKre4jE= Subject key identifier: 86:D0:29:7C:37:45:D5:ED:F9:BC:20:1A:E1:09:A4:C2:26:5C:55:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E87F0D226C1ADE091680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 184.21.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e8:7f:0d:22:6c:1a:de:09:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=af4ed1c5-72e1-40ed-984f-3d1ebdfbeaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:d6:70:3d:af:83:e5:95:61:87:59:10:bd: 58:55:44:ef:9e:77:72:f5:bc:eb:fc:12:81:87:0f: e9:f2:3c:39:1c:3a:11:15:cb:03:78:f4:a0:63:df: f5:50:92:9f:74:33:85:0c:fa:0b:3b:d8:6e:11:89: a7:7e:76:31:e9:a0:f1:e7:e6:d2:32:be:26:ae:05: 61:6f:4e:04:7f:c0:5c:8d:49:3a:b6:f2:13:a0:1c: 75:24:f1:23:aa:4d:32:c9:5d:21:a4:5e:c4:0a:2b: 06:b4:9f:74:8f:db:9a:f3:11:46:b7:c6:8a:d7:e8: 0a:96:21:56:9d:c3:be:f2:45:f2:c8:ea:71:d6:c2: db:81:49:8c:5c:d1:3a:fe:a3:fd:c9:4b:09:9a:87: a7:64:45:77:21:77:eb:11:95:17:e0:63:9d:76:c8: cd:d2:8f:a2:ab:b6:ed:90:72:c2:cb:da:5d:30:95: 41:a4:1f:68:9e:bd:4c:d8:c3:f5:7c:28:d2:d8:ef: 86:37:2e:bd:29:ac:7e:30:bf:cb:36:40:bc:7b:ac: a5:1c:b8:f0:b2:da:12:73:93:2a:c5:29:81:fa:3f: 73:4d:95:8f:d4:07:db:ef:46:47:f9:dc:2d:3c:e1: ce:0e:b0:42:93:d0:9a:5b:26:08:4c:56:64:dd:6a: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D0:29:7C:37:45:D5:ED:F9:BC:20:1A:E1:09:A4:C2:26:5C:55:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afc3930-5bc7-3cc4-926e-eacd5d1c308c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.21.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:46:38:a7:d0:ea:21:f2:3b:e9:8e:70:67:02:03:e7:9f:43: cc:11:4b:fe:3a:10:43:14:27:ce:38:85:76:00:6e:19:04:67: 0e:7a:3e:93:f2:de:c1:4c:c8:8d:2d:1c:fb:bc:0c:29:1b:38: 8e:59:d2:b4:6e:80:da:9d:a7:3d:8e:4f:e8:80:37:0c:5e:c8: cd:20:1d:e5:fa:ae:ba:94:eb:d1:60:40:db:96:3e:24:33:a4: 05:36:8e:00:8e:98:e7:0a:3d:14:48:31:74:19:7b:5c:72:d0: 15:69:09:8a:95:3a:47:ac:ec:1e:70:41:bc:13:cc:fa:d1:a9: da:fc:7c:a4:f5:ac:89:cd:70:4d:8b:06:05:ce:40:16:41:fa: cc:dc:82:3c:9a:a9:71:8e:1e:ec:e2:08:91:87:40:fe:83:dc: 8d:23:aa:0e:7f:bc:ae:7f:31:9c:c0:56:c2:af:fb:92:27:ac: 58:c4:62:ad:1d:e7:15:cb:15:f5:0b:7e:f0:06:a2:9b:d5:43: 47:56:a1:20:2c:45:d2:9d:43:35:bf:f3:ce:18:5a:dc:d5:25: cf:5c:95:5e:e3:2d:13:fd:5e:c3:8f:4f:2c:97:90:79:0f:e0: 2c:9c:a4:f9:a8:30:af:0a:45:b2:3f:09:e3:73:8e:2d:3b:d8: 8a:ab:e7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeh/DSJsGt4JFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWY0ZWQxYzUtNzJlMS00MGVkLTk4NGYtM2QxZWJkZmJlYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAjWcD2vg+WVYYdZEL1YVUTvnndy9bzr/BKB hw/p8jw5HDoRFcsDePSgY9/1UJKfdDOFDPoLO9huEYmnfnYx6aDx5+bSMr4mrgVh b04Ef8BcjUk6tvIToBx1JPEjqk0yyV0hpF7ECisGtJ90j9ua8xFGt8aK1+gKliFW ncO+8kXyyOpx1sLbgUmMXNE6/qP9yUsJmoenZEV3IXfrEZUX4GOddsjN0o+iq7bt kHLCy9pdMJVBpB9onr1M2MP1fCjS2O+GNy69Kax+ML/LNkC8e6ylHLjwstoSc5Mq xSmB+j9zTZWP1Afb70ZH+dwtPOHODrBCk9CaWyYITFZk3Wqi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbQKXw3RdXt+bwgGuEJpMImXFVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFmYzM5MzAtNWJjNy0z Y2M0LTkyNmUtZWFjZDVkMWMzMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFGOKfQ6iHyO+mOcGcCA+efQ8wRS/46EEMUJ844hXYAbhkEZw56PpPy 3sFMyI0tHPu8DCkbOI5Z0rRugNqdpz2OT+iANwxeyM0gHeX6rrqU69FgQNuWPiQz pAU2jgCOmOcKPRRIMXQZe1xy0BVpCYqVOkes7B5wQbwTzPrRqdr8fKT1rInNcE2L BgXOQBZB+szcgjyaqXGOHuziCJGHQP6D3I0jqg5/vK5/MZzAVsKv+5InrFjEYq0d 5xXLFfULfvAGopvVQ0dWoSAsRdKdQzW/884YWtzVJc9clV7jLRP9XsOPTyyXkHkP 4CycpPmoMK8KRbI/CeNzji072Iqr58U= -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:59 2025 by rpki-client